CVE-2025-38712

Summary

In the Linux kernel, the following vulnerability has been resolved:

hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()

When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplus_fill_super() assumes that the attributes file is not yet created, which later results in hitting BUG_ON() when hfsplus_create_attributes_file() is called. Replace this BUG_ON() with -EIO error with a message to suggest running fsck tool.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < bb0eea8e375677f586ad11c12e2525ed3fc698c2affected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < 9046566fa692f88954dac8c510f37ee17a15fdb7affected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < 03cd1db1494cf930e2fa042c9c13e32bffdb4ebaaffected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < dee5c668ad71ddbcb4b48d95e8a4f371314ad41daffected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < b3359392b75395a31af739a761f48f4041148226affected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < 1bb8da27ff15e346d4bc9e248e819c9a88ebf9d6affected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < d768e3ed430e89a699bf89d3214dcbbf4648c939affected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < ce5e387f396cbb5c061d9837abcac731e9e06f4daffected
LinuxLinux95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd < c7c6363ca186747ebc2df10c8a1a51e66e0e32d9affected
LinuxLinux3.13affected
LinuxLinux0 < 3.13unaffected
LinuxLinux5.4.297 <= 5.4.*unaffected
LinuxLinux5.10.241 <= 5.10.*unaffected
LinuxLinux5.15.190 <= 5.15.*unaffected
LinuxLinux6.1.149 <= 6.1.*unaffected
LinuxLinux6.6.103 <= 6.6.*unaffected
LinuxLinux6.12.43 <= 6.12.*unaffected
LinuxLinux6.15.11 <= 6.15.*unaffected
LinuxLinux6.16.2 <= 6.16.*unaffected
LinuxLinux6.17 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

Additional References

References